Malicious code in postgres-canopus-supervisor-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd0ae963def08804b0e22002cdc6ddc6c066f05c1c505b3acf66c67b8716c8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yonder-venus-buffer-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51d3401fcbb13614cb43cc714a5d514e36caa6fe0cc27b35299a6f00a89cc8b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-eridanus-iota-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65aa2b88d2e7d66ee39513bfc1364e086fda5473dc9a5bdf8acb712cfd322ccd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-nconf-mongoose-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c7e9ccfbb66030779cfdb08d5974f09dae0bd9b40fce68f9703983ce096da8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in start-husky-nightwatch-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20316704e355b8f90ebd7ca6957fb6a2bac05276f95761d8281561f3a11757a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jasmine-less-loader-schema-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8781290ca38b5ec3e1d92269c19df4d6e6701a45b9ed9dc6da3617bc2daaa5af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-jwt-antares-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e98c8e4329229fbcc553c2ab25a7908722a9425806a82c7c46aeb6def65c0371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in axios-mutation-stop-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ef0f78ec274cc166f0d04c5d2e49ce4ced44fb49664709ba53e0ff780fbd8ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in izar-meteor-nightwatch-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01d258d1a74582347b0d7071902b081a7b884336ddb8de8ea8700151566361f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in event-sedna-elektra-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aaf62dc662a6d8b1068d1c49bd2b9ec972d870646a3b2987a8882ceac957b65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protractor-oauth-izar-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d68bd7685f92c9fe05e749f9754a0cba699d978905e494f3045f2e5beb5c437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oberon-redis-luna-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a7dc99789c6a0bc0bffec45b88cad0cdbd527b9612b08e1c1088d1d9fa367c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in module-blitz-process-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eb7ff6204819262337ea539f3737fa48f0b96ac4de62f3f641de134076793aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acamar-cygnus-hyperion-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54902156b4b37f88f59026798fee089db5ff6660a5881c39ec85cba8ece7921c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yakutsk-jest-sequelize-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95e8e8e3f60647fb8f627ae04557661e87923e588fb334d4d4ba33d2b9b02584 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global-babel-sagitta-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 280ac52a25aeeb1b2e6c9f3a4a230c3844f59f27bfdf1b084f24285bbc370d42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gravity-babel-lint-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36a3b28da6c63c75d153189ed52ace7876ed614e4e5a0dd5668034af33cfb653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gulp-webdriver-mocha-yildun-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 204e94d6ea198d5df1a1fbf2ba5bba87ce888ae2859eb0febdbd54e436e7238c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shelljs-luna-sadr-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16462d0ef7a890863b7fa94c464a2b54c651b156d14de9f454999771ad47d84d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141235 Malicious code in cressida-ini-markdownlint-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a65662cda736d980784b56270f444cf897c757c5fde067bd14ebded2277d2d4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...